Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/02/2024, 13:36

General

  • Target

    89a51da1065144d6b2f6fa977ada1d4b.html

  • Size

    14KB

  • MD5

    89a51da1065144d6b2f6fa977ada1d4b

  • SHA1

    0f91a82a495c787154555dfc7889a6b95763855f

  • SHA256

    f8b59ededfb785fb5f389e5043343e23188eaeae47a421a8b98915ab0bce2b01

  • SHA512

    5390d376025e0985f84cf1348667b34bcb4be2bcfd850ac1b6c92a972c44494842d36c55011480bec410dd523668c9dc18626bfc38fcb38ef95e1fbf5290357c

  • SSDEEP

    192:4RQhU5jc/cKUg937lD1TUg9HxWgooJC24OFaIvXr9W4UCDv+tvTwnzy41GmlmP3X:JUc/17lDSJgooJC24m/j+qv+J2zyUJ2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\89a51da1065144d6b2f6fa977ada1d4b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    cb99b6d5040641081530ef8f6049f1aa

    SHA1

    3fa9e3148cbee0e561da3787919043483ee5e5c0

    SHA256

    3e1607026f332ae19539f0621c8b18c820245d196febf8bf258253667ebc94d8

    SHA512

    13cdc5995fa4741d474c00491ea55b26101a88ee3495327950249e8bef1e16de29f46d0c1ffef3682eac0e041f0b06545d51ef8152a33606f0e13fe35e6a1d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    8a53aeda99f0c5180554250b2e01a77c

    SHA1

    c6912abc200b97cfe04907da604b3f8097aed5e4

    SHA256

    cbfd51c77c427da824a8d201e3ff2afe6154777f85daa7ef642b6cd81c82f50f

    SHA512

    746a4e8dfae119866b7b5c477e97b984212cb4d0ae76c5de8e201ec8e113d468437295300b80f816d627e04dd2eb102e296e97494e04d15602d727662ad2c871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    c0e7ad2ed2cda98de79b0d0671b5ac79

    SHA1

    b6463f221250d13d16a35d07dd4006a8d729921d

    SHA256

    a7d883caf0d5e6a00f1d3ab6fa582886dd13370c8aadea829772ca21efc6cc74

    SHA512

    7fb63674c5df80d3cd616f8efc718352866a3c6a43b3c674faf84bc1ab5e46389007f4aad0b61cf1b23108763e9e8fd708c1b47b206ecdc6206e2a12d4f5bf14

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\24EU0FF7\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\24EU0FF7\www.youtube[1].xml

    Filesize

    229B

    MD5

    38a075de6e82806360a016941a112edd

    SHA1

    e8822122846d8134092c2c47ab18bcecc0eaa09b

    SHA256

    74aa3790046ea3ce0b99c687bfd5e3e4f64dcc42b9487f734eb1a845695ca96d

    SHA512

    8202aa699ffc574ae4ffad14e9050e6e1c1e1e9bdc8be4e4976592eb121fe3948bc8a82aa1d9e3b49eca4738a7abd521e3fbbd2b85f337dbc039bff863bb7a13

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verF349.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\8xk9vta\imagestore.dat

    Filesize

    1KB

    MD5

    e86b47c9aae20e6b297492ac83161119

    SHA1

    9b869039df037e689fd72a94b4018afb714c6066

    SHA256

    7535e095ef869aadb5d6ef67c5de49df2dfa8cacc3c80f82bb5c0aa1ce29866e

    SHA512

    925fadbe343bc90d678444ddc36fc2fbf6e1838e58116045412c3d5e88193af7b07b353577a88785acd010248244fab2cbbc89f1c5fa70c71c5cccd9ab8a47b2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\banner[1].js

    Filesize

    95KB

    MD5

    2617fbe67f06b4f943b5fc8672bbe193

    SHA1

    98ccc655f61215f02dc43f0af6ca6320a8f0ac42

    SHA256

    c42431f1fdc3624846072164c0fd27f43af6582eab30d2c9658a159cb5a45931

    SHA512

    fcc3dc136a5ca96563e578f093f913e3e1920a142737a60edcb93e4adc6ce892748ce20e96449529d0bca5e38bf13fb8806b6bdc01b7d2e6c1e37f4fe1618dfe

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\hd-style[1].css

    Filesize

    40KB

    MD5

    ba5e3c24714a4387a4599df6af480707

    SHA1

    296a00039438cba9fdbad4449da6a2bb177e8a3d

    SHA256

    8f47473f38e4e314afbfbf59e9fbf5d4436f83586cf1452570fc0bd62e63f5a6

    SHA512

    973533abb115208529464b6801422fc5ea9426a0d639c3d46633a8e2a6fcdb25d8756c792243e3b1465363b7faa575ac59687cf3a9a1c1a14bb0ea3e16ba650f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VQ[1].woff

    Filesize

    16KB

    MD5

    d22f975c52faaf5f561bcf90641485d4

    SHA1

    4092103795efeb56b3cf83a69d1f215771ac651d

    SHA256

    08cccd7191ddeadbb2ac3f16aaf5e3a0b65d2477fdb5a33e3b17d1bee9501d6c

    SHA512

    b85b99e957dc5ffc88b3ef14d14b7b7738e1210c01decc249fbb4a5274baa928b6d81e652244572e45ac162aa4616b0a0c607d59a01b01303e572ac3bce03382

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\08N5I3QV\zyw6mds[1].css

    Filesize

    1KB

    MD5

    a5bb75d5bd1b19def25c1dd4f3d4e09c

    SHA1

    d0c1457e8f357c964b9d4b6c0788e89717fe651f

    SHA256

    ff0689879c72300a01eae0c05c3205e2ca57c4bc1a6bfa0718fa6fea4a51627e

    SHA512

    b9fc57f7ade8f34cb02ece2935acb30757ed846e4bcf81d3fcf5bfcb45611d386bd337a6337e9945c5654cf044dce4dd3fafd60a2b42ed5bdc857ef96d077a69

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BPK32G26\common[1].js

    Filesize

    8KB

    MD5

    56b21f24437bfc88afae189f4c9a40ff

    SHA1

    a9d3acad3d4c35da454e4a654bdd38f8d2c4e9d0

    SHA256

    cfece1b609f896c5cd5e6dbe86be3ba30a444426a139aec7490305ebf4753ed4

    SHA512

    53d4718e60a47526be027c7829f9ad48f381e22765790f20db35ff646bd994f8085b12b8fbeefd5b29ecda8f71f4c6c62b64652bc9a7256e001b5e4047c21651

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BPK32G26\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BPK32G26\js[1].js

    Filesize

    189KB

    MD5

    efc21aeb4e560a9e0dd8eeead9dd022e

    SHA1

    9ab9bb136be1bc8eb346330f05723f5ebb827afe

    SHA256

    5053a1e540ae766c3b33e252f04aed7ba1334a3de287f7138fa8b9b7ad1ba2d6

    SHA512

    708b2f8b2a4a59ee8c9f8f1c5699493d1dab47057fb1592d4b6a928be74bd38fe5ea3d96fcac4c51a589ba7681543ddab99994cdb7835034a2ff7220eaf23c69

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BPK32G26\script[1].js

    Filesize

    94KB

    MD5

    1382f09764f50b7e6b128cc70e6b3579

    SHA1

    c37e39f32968a394d854454c425dbb64afd0ab81

    SHA256

    5de1b6de9a88c7fa83b1b88e2aa160e39fd069e9a7ad0dce7f453ec02724abee

    SHA512

    6af4b902ef59ff58105eb9b70287492d7154f952fe525ec4ce1d743b72b979bd9b82b3c99fd5e05770b125f5295ef20470b1401dea5256e241129f98f4313e95

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\hd-js[1].js

    Filesize

    23KB

    MD5

    6761faa022e0371e84e74a5916ebaa44

    SHA1

    5320c3d53d5447bad2a02c63208deca7fb94b655

    SHA256

    da17fb5b54c0fcd77c7358ff274823cb6a02ba0c4b6fcdf347c1ef611818bd9e

    SHA512

    a8cdba92942f299b648e87109d193a1f7eeb8f243eb2bbe4224423b512c400fccf930d81cd403a925fdf99220fdffcf89da69305cdc054963a64da470072d019

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\recaptcha__en[1].js

    Filesize

    488KB

    MD5

    16cb1c02d3183e1026b4ca6b3eb3d509

    SHA1

    156c9649e7a6e78b8fd974cf29ecdfc8c0fe3929

    SHA256

    689c72d7718868395eaf4bbe26e9f52e92f16daaa1d5486b53ae3744a996f1e2

    SHA512

    aea879561c737bb7ce6784f0178b429a19c3b854415d30342db41184ee356cc6f7e138dfd1d7212ae7dbee3a2aae3a32ca2880cdc8132da06def9fb562cc5b37

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\script[1].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV2I56HE\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M4T5ISGA\d[1]

    Filesize

    23KB

    MD5

    ef76c804c0bc0cb9a96e9b3200b50da5

    SHA1

    efadb4f24bc5ba2d66c9bf4d76ef71b1b0fde954

    SHA256

    30024e76936a08c73e918f80e327fff82ee1bd1a25f31f9fce88b4b4d546055d

    SHA512

    735b6470e4639e2d13d6b8247e948dbd6082650902a9441b439ceacc4dfce12cd6c9840ee4c4dcb8a8f1e22adb80968f63ace0c0051811a8d6d1afb2b3c68d74

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M4T5ISGA\enterprise[1].js

    Filesize

    974B

    MD5

    49c1e6979b3050bb3667878fa23aa53e

    SHA1

    6efe36875dde09cf2062aba312be85f86933b242

    SHA256

    f8d81984d3a7f11478cc0c8b51b5c1ee259775b82425f8cec3ebfd4e6457a130

    SHA512

    80429bf30625d2d775a21b9746b9309fcfa406407d8d1764845d07b3c7ab5ef3a5c224640ec4d77031e7815b5b82119296f866863641a9bba2485bf237f3848e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M4T5ISGA\hd-style-print[1].css

    Filesize

    1KB

    MD5

    7878fda89f8e725fa06880d1890f9c00

    SHA1

    3f8e8aa44d26d3cff13159830cf50aa651299043

    SHA256

    6d17b244f2b4b8a93886dbe5cffad1cbe8fc9079495fb972a10fac1eda0a16ce

    SHA512

    392d457f4c54088abef2b4deeb042220ab318d00d1157fc27386a5faac821c70c78c8452c99bc75758fa36643932938274c171589307919ec01e293010ea35fd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M4T5ISGA\js[1].js

    Filesize

    243KB

    MD5

    6aa9fed77ea4a70dc19c65162d794090

    SHA1

    320e3878dbaaab864d92deaff6c993657a59b742

    SHA256

    ef0c2fc7cf5d40658a08f250f07384541147693af5a0c05a35576ad2b8549d0c

    SHA512

    0c3e59e1ae3ffe8ef7ef2c2f40cba763a399f86e861194c1e876688d40461f69e1aef153d0ccf4e4eeeac0b80ff9105185e3ba779c26b464edf9deee8cf4f45b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M4T5ISGA\responsive[1].css

    Filesize

    66KB

    MD5

    4998fe22f90eacce5aa2ec3b3b37bd81

    SHA1

    f871e53836d5049ef2dafa26c3e20acab38a9155

    SHA256

    93fcbfca018780a8af6e48a2c4cd6f7ad314730440236c787d581e2cef1ab8f8

    SHA512

    822158dac2694341f6cf5c8f14f017ac877c00143194d3cd0a67ffd4d97f9bf8f2305e33b99fa12f62eee53ba18029541c0601ea5496ff50279d1200cfa03232